Privacy Policy (Uchinoko Live — Custom Pet Bundle and Accounts)
This policy explains how Takuya Ito ("we", "us"), a sole proprietor based in New York, United States, handles personal information in the Uchinoko Live custom "Pet Bundle" service and the accounts used to receive Bundles (together, the "Service").
Short version: we collect only what we need to make and deliver your Bundle and to take payment. Before any photo goes to an AI service, we crop it to show only your pet and strip location data, so your name, email and face never go to the AI services. We do not sell your information, show ads, or use analytics trackers.
1. Who is responsible
The controller of your personal information is Takuya Ito, New York, United States. Contact: hello@uchinoko.live.
2. What we collect
| Information | When and from where |
|---|---|
| Your name (a nickname is fine), email address, and our messages | When you contact us by email |
| Pet photos and the data embedded in them (date, time, location), plus any people or background that appear | When you send photos to ask about an order |
| Your pet's name, type, features and preferences that you tell us | During our conversation |
| Payment information (name, email, country, amount, payment ID, card brand and last 4 digits) | From Stripe when you pay. Stripe receives your card number directly; we never see it |
| Account information (the user identifier issued by Apple and your email address; if you use Apple's "Hide My Email", the relay address Apple provides) | From Apple when you use Sign in with Apple |
| Delivery records (which Bundle was retrieved and when) and server connection logs (IP address, time, device and browser type) | Automatically when you receive a Bundle |
| Survey answers and your choice about showing your Bundle as an example | After delivery, only if you answer |
What happens inside the app (petting times, mood, the pet's current pose, etc.) stays on your device and is not sent to us. We do not use advertising or usage-analytics tools.
3. Why we use it, and our legal bases
| Purpose | Legal basis (for people in the EU/EEA and UK) |
|---|---|
| Checking whether we can make a Bundle, replying to you, sending the order summary | Steps you asked for before a contract (Art. 6(1)(b) GDPR) |
| Making, redoing and delivering the Bundle | Performance of our contract with you (Art. 6(1)(b)) |
| Taking payment, refunds, accounting and tax records | Contract, and our legal obligations (Art. 6(1)(b) and (c)) |
| Managing your account (sign-in, delivery, withdrawal, deletion) and preventing unauthorised access | Contract, and our legitimate interest in keeping the Service secure (Art. 6(1)(b) and (f)) |
| Answering questions and sending important notices (delivery, changes to terms, closure of the Service) | Contract, and legitimate interest (Art. 6(1)(b) and (f)) |
| Using survey answers to improve the Service | Your consent, given by choosing to answer (Art. 6(1)(a)) |
| Showing your Bundle as an example | Your separate consent (Art. 6(1)(a)); you can withdraw it at any time |
We never use your photos for other works, advertising, or AI training, and we never sell your information. We only send marketing emails if you ask for them.
4. Service providers and where your information goes
We run the Service on our own, using the providers below. We live in the United States (New York), so we also handle your information there.
| Provider | Country / region | What they receive | Purpose |
|---|---|---|---|
| OpenAI | United States | Pet-only crops of your photos (location data removed), and artwork made from them | Generating photo-style artwork |
| Replicate (the video model provider, BytePlus of the ByteDance group, may also process it) | Replicate: United States. BytePlus: operated from Singapore, processing in Malaysia, Indonesia or the EU (mainly Malaysia) | Artwork made from your photos | Generating videos |
| Stripe | United States | Payment information | Payments and refunds |
| Supabase | Data stored in Japan (Tokyo); the company is in the United States | Account information, order records, Bundles, delivery records, and photos if uploaded through the app | Sign-in, storing and delivering Bundles |
| Apple | United States | Notice that you revoked Sign in with Apple | Sign-in and account deletion |
| Zoho (Zoho Mail) | United States | Our emails with you and photo attachments | Receiving and storing our email |
What we send to AI services. We send only images that show your pet, cropped and with embedded data (such as location) removed. We do not send your name, email address, payment details, or images of people. We choose settings that stop the AI services from using our inputs for training where they offer them (OpenAI), and we use Replicate through its API, where inputs and outputs are deleted automatically after one hour.
International transfers. Your information is handled in the United States and the other countries listed above, whose data protection laws may differ from those where you live. For people in the EU/EEA, UK and Switzerland, where a provider handles personal information on our behalf we rely on the safeguards in that provider's data processing terms, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework where the provider is certified. You can ask us for more information about these safeguards.
5. How long we keep it
| Information | How long |
|---|---|
| Pet photos (email attachments and our working folders) | 90 days after delivery. If you don't go ahead, or you cancel or get a refund, we delete them by hand within about 7 days. We keep them during production and the redo period |
| Pet photos (if uploaded through the app, on our server) | Deleted automatically: 7 days after upload if unpaid, 7 days after a cancellation or refund, 90 days after delivery. Kept during production |
| Photos and artwork sent to AI services | Deleted from the services when we delete the photos above, where we can. Replicate deletes them automatically after one hour. The video model provider (BytePlus) may keep them for up to 180 days. Some providers (such as OpenAI) may keep copies for a period after deletion under their own rules |
| Your Bundle | While your account exists (so you can receive it on your device). Withdrawn and deleted if you get a refund or delete your account |
| Work-in-progress artwork and videos | 90 days after delivery, or as long as your example permission allows |
| Account information | Until you delete your account |
| Order and payment records | 7 years after the transaction, for accounting and tax. If you delete your account, we remove your contact details and keep the rest |
| Our email conversations | 2 years after the last message |
| Server connection logs | About 7 days (as kept by Supabase). Delivery-count records: 31 days |
| Survey answers | 2 years. We keep anonymous totals |
6. Deleting your account and asking us to delete information
- You can delete your account in Uchinoko Live at any time. When you do:
- photos stored on our server are deleted;
- Bundles delivered only to you are withdrawn and deleted (they are also removed from your devices and cannot be received a second time);
- your Sign in with Apple authorisation is revoked;
- your contact details are removed from our order records. Payment records (payment ID, amount, date) are kept for the period above for accounting and tax.
- To delete information held outside the app (emails, our working folders, etc.) or to withdraw your example permission, email us. We will act promptly and tell you when it is done.
7. Your rights
Wherever you live, you can ask us to tell you what information we hold about you, give you a copy, correct it, delete it, or stop using it. Email hello@uchinoko.live. We will confirm it is you, and reply free of charge, normally within 14 days (and always within the time limit the law gives).
If you are in the EU/EEA or the UK, you also have the right to restrict processing, to object to processing based on legitimate interests, to data portability, and to withdraw consent at any time (this does not affect processing before withdrawal). You can complain to the data protection authority where you live or work (in the UK, the Information Commissioner's Office). We would appreciate the chance to sort out your concern first.
If you are in California or another US state with a privacy law: we do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information. Our browser and Mac versions do not track you across other websites, so we do not respond differently to "Do Not Track" signals.
8. Security
- Photos, Bundles and order records are kept in private, access-controlled storage that only we can access. Bundles are delivered only to the account registered as their owner, through time-limited links.
- Our work computer and accounts are protected with sign-in security such as two-step verification.
- If a breach of your information occurs, we will notify you and the relevant authorities as required by law.
9. Children
The Service is for adults (18 or over). We do not knowingly collect information from children. If you think a child has sent us information, please contact us and we will delete it.
10. If you live in Japan
If you live in Japan, our Japanese privacy policy (https://uchinoko.live/privacy.html) applies, including the consent to provide information to third parties in foreign countries required by Japan's Act on the Protection of Personal Information.
11. Changes to this policy
We will post any change on this page. For important changes (for example, new purposes or new providers), we will also email you before the change takes effect.
12. Contact
Takuya Ito Email: hello@uchinoko.live Location: New York, United States (full postal address provided on request)
The Uchinoko Live iPhone app (the version without sign-in) has its own privacy policy: https://hanimaru1121.github.io/hani/privacy.html
Effective date: October 6, 2026